{"id":"CVE-2026-96207","published":"2026-10-08T23:17:05.583","lastModified":"2026-10-10T04:18:19.870","description":"Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","cwes":["CWE-295"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96207","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw in Microsoft Partner Center involves improper certificate validation, allowing attackers to elevate privileges over a network. This vulnerability is critical as it can lead to unauthorized access and control over sensitive systems.","exploitability":"Exploiting this flaw requires the attacker to have network access and knowledge of the target environment. Precondition is the presence of unpatched or misconfigured systems.","blast_radius":"If exploited, the impact is high, as it could lead to unauthorized access and control over Microsoft Partner Center systems, potentially affecting multiple interconnected systems and services.","remediation":"Upgrade to the latest version of Microsoft Partner Center as soon as possible.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","network","partner-center"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:42:56.204Z"}}